Home / Current Issue / Paper 1720341
Enterprise Risk Management in U. S. Financial Institutions: Building Resilience in an Increasingly Complex Risk Environment
Subject area: Arts, Social Sciences and Humanities · Area of research: Enterprise Risk Management, US Financial System
DOI: https://doi.org/10.64388/IREV9I9-1720341
Abstract
The U.S. financial sector currently faces a wide range of unprecedented risks, including credit, market, liquidity, cybersecurity, and algorithmic decision-making challenges, all worsened by an expanding regulatory environment. The 2008 crisis and ensuing reforms have elevated standards for risk management. Nonetheless, many institutions still struggle to develop comprehensive Enterprise Risk Management (ERM) systems that operate smoothly across departments, leverage technology effectively, and withstand multiple shocks (Lawati et al., 2025). This paper examines the current ERM landscape among U.S. financial institutions, highlights gaps in existing frameworks, and proposes an integrated model to boost resilience, compliance, and stakeholder value simultaneously rather than separately. This qualitative, applied approach systematically reviews academic literature, regulatory documents, and industry reports, primarily from peer-reviewed sources from 2015 to 2025. It also includes materials from federal banking agencies and industry bodies. A clear pattern emerges: institutions with more advanced ERM implementation tend to perform better financially and adapt more effectively to disruptions (Gao, Hsu, and Liu, 2025). Nonetheless, this maturity level varies widely; smaller banks often struggle to adopt the technology and analytics that larger institutions readily implement. Cybersecurity has become the fastest-evolving risk category, surpassing others. The swift adoption of artificial intelligence and machine learning boosts capabilities but also introduces new risks not seen a decade ago (Ma, 2025). Overall, the evidence points to key priorities: develop an integrated ERM framework with a focus on risk governance, utilize predictive analytics, enhance cybersecurity, invest in employee training, and view regulatory engagement as an ongoing relationship rather than a mere checklist. Success hinges on genuine board ownership and embedding a risk culture into daily operations, beyond policy documents.
Keywords
Enterprise Risk Management, Banking, Compliance, Operational Risk, Governance, Risk Appetite, Risk Culture, Technology Integration, Regulatory Compliance, Financial Stability
References
[1] Abiad, Z., Abraham, R., El-Chaarani, H., & Binsaddig, R. (2025). The impact of board of directors' characteristics on the financial performance of the banking sector in Gulf Cooperation Council (GCC) countries: The moderating role of bank size. Journal of Risk and Financial Management. https://doi.org/10.3390/jrfm18010040
[2] Akbaş, M. Ç. (2024). Measuring the impact of enterprise risk management on the performance, value, and risk indicators of Borsa Istanbul XBANK companies using data-mining prediction models. Humanities and Social Sciences Communications. https://doi.org/10.1057/s41599-024-03871-z
[3] Aldossari, S., Mokhtar, U. A., & Ghani, A. T. A. (2025). Empowering Saudi manufacturing small and medium enterprises: A framework for big data analytics adoption and its impact on decision-making. SAGE Open. https://doi.org/10.1177/21582440251369162
[4] Ally, A. M. (2025). Artificial intelligence (AI) and financial technology (FinTech) in Tanzania: Legal and regulatory issues. International Journal of Law and Management. https://doi.org/10.1108/ijlma-07-2024-0251
[5] Alrifae, A. A. M., Alhabeeb, A., Alhanatleh, H., & Alnajdawi, S. (2025). Exploring the role of succession planning and talent development in enhancing organizational agility: The case of Saudi Arabia's banking sector. Sustainability. https://doi.org/10.3390/su172411215
[6] Al-Shanableh, N., Alzyoud, M., Al-Omar, S., Kilani, Y., Nashnush, E., Al-Hawary, S. I. S., & Al-Momani, A. M. (2024). The adoption of big data analytics in Jordanian SMEs: An extended technology-organization-environment framework with diffusion of innovation and perceived usefulness. International Journal of Data and Network Science. https://doi.org/10.5267/j.ijdns.2024.1.003
[7] Anton, C. E., Baba, C. M., & Bucșoiu, O.-A. (2025). Perspectives on integrating risk management and sustainability for financial performance: A systematic literature review. Sustainability. https://doi.org/10.3390/su17083456
[8] Bagherifam, N., Naghdi, S., Ahmadian, V., Fazlzadeh, A., & Baghalzadeh Shishehgarkhaneh, M. (2025). Digital regulatory governance: The role of RegTech and SupTech in transforming financial oversight and administrative capacity. International Journal of Financial Studies. https://doi.org/10.3390/ijfs13040217
[9] Bank for International Settlements. (n.d.). Basel III: International regulatory framework for banks. https://www.bis.org/bcbs/basel3.htm
[10] Ch, R. K., Meenadevi, K., Kumar, D, D., & Nagaraj, R. (2026). Deep learning in credit risk assessment: A data-driven approach to transforming financial decision-making and risk analytics. Journal of Risk and Financial Management. https://doi.org/10.3390/jrfm19050361
[11] Committee of Sponsoring Organizations of the Treadway Commission (COSO). (2020). Compliance risk management: Applying the COSO ERM framework. https://www.coso.org/_files/ugd/3059fc_5f9c50e005034badb07f94e9712d9a56.pdf
[12] Dichev, A. V., Zarkova, S., & Angelov, P. (2025). Machine learning as a tool for assessing and managing fraud risk in banking transactions. Journal of Risk and Financial Management. https://doi.org/10.3390/jrfm18030130
[13] Gao, S., Hsu, H.-T., & Liu, F. (2025). Enterprise risk management, financial reporting and firm operations. Risks. https://doi.org/10.3390/risks13030048
[14] Gul, T., Karaatmaca, A. G., & Raza, A. (2025). Impact of green human resources management practices on sustainability through organizational resilience and organizational learning in Pakistan's banking sector. Sustainability. https://doi.org/10.3390/su17052087
[15] Hirani, V. K. (2025). Generative artificial intelligence in banking: Risk management frameworks for responsible deployment. Journal of International Crisis and Risk Communication Research. https://doi.org/10.63278/jicrcr.vi.3455
[16] Ismail, S., & Ahmed, E. (2023). The impact of liquidity, credit, and operational risk on financial stability of conventional banks in Jordan. Uncertain Supply Chain Management. https://doi.org/10.5267/j.uscm.2023.3.006
[17] Kagima, J. W., & Munene, R. (2025). Evaluation of operational risk management practice and financial performance of commercial banks in Kenya. International Journal of Research and Innovation in Social Science. https://doi.org/10.47772/ijriss.2025.90500088
[18] Khurram, A., Iqbal, A., & Pappas, V. (2025). Systemic risk: New evidence from alternative financial systems. Review of Quantitative Finance and Accounting. https://doi.org/10.1007/s11156-025-01413-5
[19] Lawati, A. A., Hussin, B. M., Kadir, M. R. A., & Khudari, M. (2025). The impact of enterprise risk management on firm competitiveness: The mediating role of competitive advantage in the Omani insurance industry. Risks. https://doi.org/10.3390/risks13100199
[20] Ltaifa, M., & Derbali, A. M. S. (2026). The stability of European financial institutions amid systemic risk and unexpected shocks: An empirical study from 2005 to 2024. Journal of Economic Integration. https://doi.org/10.11130/jei.2026001
[21] Ma, T. (2025). Research on the application of artificial intelligence technology in enterprise financial risk warning – Based on machine learning method. Decision Making: Applications in Management and Engineering. https://doi.org/10.31181/dmame8120251489
[22] Miloș, M., & Miloș, L. (2022). Use of derivatives and market valuation of the banking sector: Evidence from the European Union. Journal of Risk and Financial Management. https://doi.org/10.3390/jrfm15110501
[23] Musallam, S. (2024). The effect of the board of directors on financial performance and the existence of risk management as an intervening variable. Journal of Islamic Marketing. https://doi.org/10.1108/jima-10-2022-0270
[24] Nguyen, P. V., Bui, L., & Corvello, V. (2026). Driving business performance through risk management culture and organizational resilience: Examining the role of government support. Business Process Management Journal. https://doi.org/10.1108/bpmj-10-2025-1732
[25] Nkansa, P., Barr-Pulliam, D., & Walker, K. (2025). From compliance to strategic partnerships: The role of internal audit in enterprise risk management and opportunities for future research. Journal of Risk and Financial Management. https://doi.org/10.3390/jrfm18120707
[26] Sang, N. M. (2024). Evolution and future directions of banking risk management research: A bibliometric analysis. Banks and Bank Systems. https://doi.org/10.21511/bbs.19(2).2024.01
[27] Sathupadi, K., Achar, S., Bhaskaran, S. V., Faruqui, N., & Uddin, J. (2025). BankNet: Real-time big data analytics for secure internet banking. Big Data and Cognitive Computing. https://doi.org/10.3390/bdcc9020024
[28] Shahzadi, A., Ishaq, K., Nawaz, N. A., Rosdi, F., & Khan, F. A. (2025). Unveiling personalized and gamification-based cybersecurity risks within financial institutions. PeerJ Computer Science. https://doi.org/10.7717/peerj-cs.2598
[29] Sringam, A., & Wuttidittachotti, P. (2026). The paradox of cyber risk controls: An empirical analysis of readiness and protection inefficiencies in Thailand's financial sector. Risks. https://doi.org/10.3390/risks14010020
[30] Stasse, L. J. A., Hilhorst, C. A. R., & Rouwelaar, J. A. T. (2025). Enterprise risk management revisited: A study to identify the elements of ERM. Journal of Risk Research. https://doi.org/10.1080/13669877.2025.2553846
[31] Surana, S. (2025). The efficacy of internal controls and audit committees in mitigating financial risk: Perspectives from Indian corporate governance. Journal of International Crisis and Risk Communication Research. https://doi.org/10.63278/jicrcr.vi.3370
[32] Wang, W., & Wu, Y. (2025). Forecasting and hedging volatility indices in financial markets using a robust XGBoost model. SAGE Open. https://doi.org/10.1177/21582440251396044
[33] Weld-Ali, W. M., Zakuan, N., & Setap, M. (2025). The effect of enterprise risk management implementation and information technology security on organizational performance in Jordan manufacturing industry. Journal of Posthumanism. https://doi.org/10.63332/joph.v5i6.2203
[34] Yoewono, H., & Ananto, P. (2024). Enhancing bank performance: Integrating enterprise risk management with mobile banking applications. Journal of Economics, Business & Accountancy. https://doi.org/10.14414/jebav.v27i2.4572
How to cite this paper
@article{1720341,
author = {Abdoulie K Darboe},
title = {Enterprise Risk Management in U. S. Financial Institutions: Building Resilience in an Increasingly Complex Risk Environment},
journal = {Iconic Research And Engineering Journals},
year = {2026},
volume = {9},
number = {9},
pages = {4098-4120},
issn = {2456-8880},
url = {https://www.irejournals.com/formatedpaper/1720341.pdf},
abstract = {The U.S. financial sector currently faces a wide range of unprecedented risks, including credit, market, liquidity, cybersecurity, and algorithmic decision-making challenges, all worsened by an expanding regulatory environment. The 2008 crisis and ensuing reforms have elevated standards for risk management. Nonetheless, many institutions still struggle to develop comprehensive Enterprise Risk Management (ERM) systems that operate smoothly across departments, leverage technology effectively, and withstand multiple shocks (Lawati et al., 2025). This paper examines the current ERM landscape among U.S. financial institutions, highlights gaps in existing frameworks, and proposes an integrated model to boost resilience, compliance, and stakeholder value simultaneously rather than separately. This qualitative, applied approach systematically reviews academic literature, regulatory documents, and industry reports, primarily from peer-reviewed sources from 2015 to 2025. It also includes materials from federal banking agencies and industry bodies. A clear pattern emerges: institutions with more advanced ERM implementation tend to perform better financially and adapt more effectively to disruptions (Gao, Hsu, and Liu, 2025). Nonetheless, this maturity level varies widely; smaller banks often struggle to adopt the technology and analytics that larger institutions readily implement. Cybersecurity has become the fastest-evolving risk category, surpassing others. The swift adoption of artificial intelligence and machine learning boosts capabilities but also introduces new risks not seen a decade ago (Ma, 2025). Overall, the evidence points to key priorities: develop an integrated ERM framework with a focus on risk governance, utilize predictive analytics, enhance cybersecurity, invest in employee training, and view regulatory engagement as an ongoing relationship rather than a mere checklist. Success hinges on genuine board ownership and embedding a risk culture into daily operations, beyond policy documents.},
keywords = {Enterprise Risk Management, Banking, Compliance, Operational Risk, Governance, Risk Appetite, Risk Culture, Technology Integration, Regulatory Compliance, Financial Stability},
month = {March},
doi = {https://doi.org/10.64388/IREV9I9-1720341}
}